Which security practice matters most for regulated sector AI?

Danny Manimbo

Managing Principal · Schellman

Management Oversight

Danny Manimbo says management oversight is the one he can't underscore: if AI governance sits solely with a compliance manager, programs die, because they need ownership upward and laterally across business units.

The answer starts at 21:05.

Brennan Baybeck

SVP & CISO - Customer Success Services · Oracle

Strong Governance

Brennan Baybeck says that to him it comes back to strong governance, calling it essential.

Mandy Andress

CISO · Elastic

Inventory AI Usage

Mandy Andress says the first priority is to inventory AI usage within the organization, since without knowing where it's used and for what objectives, it's much harder to put controls and structure around it.

The answer starts at 15:01.

Julian Tang

COO for Innovation Office · BlackRock

Protect Personal Data

Julian Tang says protect personal data: regulated sectors already apply the same effort and requirements to PII that they need to ensure AI protects personal information with the right controls.

Shahir Daya

Chief Product & Technology Officer · Zafin

Workflow-Level Controls

Shahir Daya says the first move is to define controls at the workflow level, not the agent level, because agent-level controls will not scale: one agent can span many workflows and one workflow can use many agents.